Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
File:                     eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer (raw, json)
Hash identifier:          p3vFMG8OGvBwV3on/dAnKPpVvjZzjBcs6KExL2LDUrY=
Subject key identifier:   79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C6CA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 23 Jul 2026 03:38:18 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 103.224.174.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181962 (0x2c6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 23 03:38:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:c8:8b:4b:00:a7:a9:79:91:18:d1:1e:33:
                    58:6e:63:8f:b1:de:79:0c:d9:b9:9f:cc:04:3c:b5:
                    b4:59:1f:79:22:79:ff:86:df:ae:06:30:f6:96:80:
                    4d:b8:92:65:89:8d:b4:82:81:6b:3d:d5:89:aa:b0:
                    82:7e:7c:93:31:e4:07:61:20:98:9b:6c:fe:c4:b7:
                    91:6b:d2:c9:9a:2f:22:07:3c:9d:b4:8b:e0:b2:02:
                    cc:63:82:ff:6f:dd:af:dc:e0:d2:74:12:16:30:9c:
                    24:77:d2:c8:a3:25:12:ae:2c:3a:76:88:fc:52:ad:
                    95:d6:21:3b:19:ae:29:1e:25:4f:63:86:de:fd:06:
                    83:3f:f7:0c:35:23:94:2b:a7:b5:3c:ab:8c:c1:d3:
                    44:07:b7:14:87:a0:4a:89:e2:29:4b:d4:89:c0:5e:
                    3b:04:19:36:5c:3a:1d:0b:ff:d7:a4:91:f7:e1:f1:
                    50:39:18:00:0d:9a:3c:37:ab:45:02:1b:49:2e:dd:
                    21:1a:76:6c:46:b0:b7:0a:81:13:58:50:a1:cd:0a:
                    05:1f:06:27:bb:1f:50:4f:0e:a2:70:4a:aa:e8:38:
                    12:8f:97:fd:57:55:ef:4e:83:1e:f8:31:96:f7:67:
                    b3:66:3c:d9:15:01:c8:54:75:3a:ce:4b:da:db:dd:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2e:23:d0:89:9b:8c:be:d3:b5:7a:e6:b2:a5:9c:c2:9f:85:
         bb:9a:01:4e:94:4d:1e:35:a2:36:c7:53:cf:48:2f:0d:1a:bf:
         81:dd:cd:06:82:31:21:4c:56:fb:ab:76:62:88:b6:ac:a8:99:
         5e:1a:25:f3:bb:7d:46:d6:7d:84:6d:1d:f5:3c:0a:59:d2:1e:
         56:73:f5:65:00:c0:c0:9e:8f:b2:98:d0:38:bd:d5:2b:c8:58:
         f2:99:62:d8:50:09:73:bf:a8:69:61:a3:66:05:06:4a:8d:18:
         5a:e4:15:f8:c9:2b:8b:32:45:c9:12:3e:59:5a:0d:fc:0b:4e:
         d2:27:c1:fa:99:ea:0e:9b:53:2b:c2:94:86:bd:4f:b4:0e:13:
         98:48:ae:45:6c:35:5d:87:12:3c:c6:38:e7:81:a8:f6:20:37:
         c3:2e:13:d5:96:b1:e5:94:eb:7b:ce:f4:df:e2:dc:c5:0a:36:
         cf:85:fe:dc:30:3b:c9:8b:ad:f2:d6:5e:d1:bf:9f:9c:a2:ec:
         41:1a:a7:8d:4c:ac:2c:88:37:9a:08:4e:4f:b4:83:ab:a5:67:
         17:42:19:44:80:05:a8:eb:e7:cd:98:86:92:85:e4:35:e0:4e:
         71:f3:6e:3e:cc:95:c0:6d:11:a0:4d:b4:18:2d:e5:7e:84:8b:
         a1:fa:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:16 2026 by rpki-client